Information Systems Security Engineer

Information Systems Security Engineer role supporting secure integration of emerging technologies across operational, research, and enterprise environments.

• Guide and mentor professionals on complex cybersecurity challenge analysis, security assessments, and vulnerability remediation across varied systems and architectures
• Lead the creation and ongoing maintenance of RMF authorization packages
• Manage ATO processes, including authorization activities and re-authorization support
• Develop and maintain cybersecurity artifacts including system security plans and POA&Ms
• Use tools such as ACAS, SCAP, and eMASS to evaluate system risks and coordinate vulnerability remediation across project teams
• Support compliance with STIGs and IAVM directives, including scan-to-evidence coordination
• Embed cybersecurity best practices into AI development pipelines and integrate security across the system lifecycle
• Collaborate with DevOps, Cloud Architects, AI and ML Engineers, and participate in continuous learning aligned to evolving technologies

Requirements

• Experience with Risk Management Framework (RMF), including creation and maintenance of authorization packages, ATOs, and re-authorizations
• Experience conducting security assessments, vulnerability remediation, and continuous monitoring aligned to RMF
• Experience with compliance scanning and vulnerability management tools, especially ACAS and SCAP
• Experience implementing cybersecurity directives including IAVM directives, CPUs, and STIGs
• Experience updating and maintaining eMASS, including scan results, documentation, and evidence packages
• Knowledge of system lifecycle management and procurement cybersecurity requirements
• Ability to prepare and maintain cybersecurity documentation, including SSPs, SARs, and POA&Ms
• Ability to analyze system architectures, including hardware and software designs, to identify and mitigate security risks
• TS/SCI clearance with a polygraph
• Education and experience: HS diploma or GED and 6+ years of cybersecurity experience, or Bachelor’s degree and 4+ years of cybersecurity experience

Technologies

• Risk Management Framework (RMF)
• ACAS
• SCAP
• eMASS
• STIGs
• IAVM directives
• CPUs
• Python
• PowerShell
• Ansible

Nice If You Have

• Experience securing AI-enabled or ML-driven systems in mission contexts supporting AI capabilities across operational, research, and enterprise environments
• Experience with cloud and hybrid architectures, particularly securing AI workloads across varied computer environments
• Experience with DevSecOps tooling, CI/CD security integration, and automated compliance workflows
• Experience working with cross-functional AI and ML development teams for secure model training, deployment pipelines, and monitoring frameworks
• Experience with secure software development or secure architecture design reviews
• Experience with cybersecurity automation scripting using Python, PowerShell, or Ansible for STIG automation, scanning pipelines, or IaC security controls
• Knowledge of DoD-specific cybersecurity governance frameworks and mission workflows, including environments such as USCYBERCOM or DoW environments

Compensation

• Projected compensation range: $99,000 - $225,000 per year (annualized USD)

Clearance

• Selected applicants will be subject to a security investigation and may need to meet eligibility requirements for access to classified information
• TS/SCI clearance with polygraph is required

Work Model

• Onsite: primarily full-time at a customer facility, collaborating with colleagues and customers as required by the role

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care
• Recognition awards program for exceptional performance and demonstration of company values
• Full-time and part-time employees working at least 20 hours per week on a regular basis are eligible to participate in Booz Allen benefit programs
• Individuals who do not meet the threshold are eligible for select offerings only, not inclusive of health benefits

Identity Verification and Interview Requirements

• Identity verification uses advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud
• Candidates are expected to be on camera during interviews and assessments
• The company may take a picture to verify identity and prevent fraud

Candidate AI Usage Policy

• Use of artificial intelligence or other tools to assist with responses during interviews is prohibited unless permission is explicitly provided

Location

• Fort Meade, MD (onsite)

Non-Discrimination

• All qualified applicants receive consideration without regard to disability, protected veteran status, or other status protected by applicable federal, state, local, or international law